May have been gathering ip address evidence in an attempt to figure out who else it might be. Just because her account was verified provider doesn't mean the user still had access to the infoshare. Any feature can be turned of at the Group or User level. Verified provider is a group with a default set of access, at the user level the infoshare could have been turned off instantly but still the user would show up as verified provider.
Originally Posted by royamcr
Spoken from someone that is clearly not familiar with vBulletin... but then again this site is running a highly modified version.